Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/wuJay0lqk3M0kUzlfva2xQ5gfPY.roa
File: wuJay0lqk3M0kUzlfva2xQ5gfPY.roa (raw, json)
Hash identifier: TmwZ5c1LX72aX/DbVQomzEL9OzX97oWlGHxtGf/7fME=
Subject key identifier: C2:E2:5A:CB:49:6A:93:73:34:91:4C:E5:7E:F6:B6:C5:0E:60:7C:F6
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019428247BD5318645EADC465D85D4D025AD
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/wuJay0lqk3M0kUzlfva2xQ5gfPY.roa
Signing time: Thu 02 Jan 2025 17:51:07 +0000
ROA not before: Thu 02 Jan 2025 17:51:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44017
IP address blocks: 87.120.91.0/24 maxlen: 24
91.92.233.0/24 maxlen: 24
91.92.234.0/24 maxlen: 24
91.92.235.0/24 maxlen: 24
94.156.146.0/24 maxlen: 24
94.156.147.0/24 maxlen: 24
2a00:1728:1c::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:7b:d5:31:86:45:ea:dc:46:5d:85:d4:d0:25:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 17:51:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c2e25acb496a937334914ce57ef6b6c50e607cf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:6e:eb:25:ac:09:55:1a:cb:35:cd:85:4d:9b:
0b:84:2b:9c:ac:95:16:db:f2:fe:4f:c1:b1:1f:dc:
24:54:34:d9:a4:ac:d3:97:40:c5:90:15:07:2a:95:
ee:37:62:a7:24:0b:ed:1f:17:a7:a0:70:68:34:5b:
3d:c7:08:48:ee:ba:14:14:39:d6:68:be:c3:3e:6b:
29:9a:92:4c:a0:22:60:45:f7:52:1d:7e:df:93:3e:
95:bc:cf:c2:50:39:7c:0d:b8:84:8b:ce:1f:5a:e0:
3d:8c:a5:f8:3a:6f:55:30:3f:ad:36:45:33:36:de:
c5:d5:4f:a3:5d:32:db:18:e6:88:d4:c6:2f:c8:b3:
28:ff:86:03:65:f6:35:bb:33:d6:44:3a:c2:81:72:
9a:84:f3:e0:6b:5c:93:26:f0:75:02:74:fa:a4:40:
08:f6:fd:77:98:bc:61:a8:41:2f:7d:ae:43:73:e6:
3a:0d:ec:96:1a:3d:88:d7:6b:f9:1d:13:89:f6:e2:
5e:ef:12:76:50:d8:ba:47:16:7a:8e:e3:4a:0f:3b:
8e:c8:9d:dc:b2:4d:b0:03:2c:88:6c:f5:2f:5f:88:
73:cb:90:86:b2:cc:4f:a9:f8:03:fd:be:4f:eb:4b:
38:17:20:f5:cf:5f:34:3b:d0:af:49:ba:aa:f4:43:
f3:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:E2:5A:CB:49:6A:93:73:34:91:4C:E5:7E:F6:B6:C5:0E:60:7C:F6
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/wuJay0lqk3M0kUzlfva2xQ5gfPY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.120.91.0/24
91.92.233.0-91.92.235.255
94.156.146.0/23
IPv6:
2a00:1728:1c::/48
Signature Algorithm: sha256WithRSAEncryption
27:fd:9c:1c:7b:60:bc:c8:53:fd:38:76:b3:24:80:b9:8d:a4:
75:0b:85:c7:f8:46:5c:a7:8d:74:6f:46:cd:23:4f:bd:82:ed:
52:f2:15:53:b5:20:5f:90:94:a3:1f:a1:cf:73:28:9a:65:5d:
5e:ae:cc:d8:5f:c3:59:8c:0d:43:2e:20:09:9a:c2:27:ec:6c:
c9:d6:d5:70:16:eb:f6:9e:51:8d:8f:1e:71:6e:57:4f:88:7f:
ef:68:e1:23:85:09:64:9e:a6:fa:55:03:56:0f:e0:b9:cb:82:
f9:90:86:8e:b9:2a:16:e3:ab:c0:60:0f:cd:7c:24:52:b3:98:
e9:8f:cb:f0:e6:81:49:0c:35:5a:47:99:1f:a7:01:07:03:b1:
2a:3a:55:06:a5:c0:a1:21:41:a3:b2:c2:3b:b3:77:af:8a:ec:
a8:a5:2d:ca:96:7a:30:90:4c:14:4d:9b:eb:67:89:a3:3a:72:
a7:51:95:8f:9b:b9:98:28:ac:cd:05:47:d5:14:b6:6e:06:40:
6b:ab:90:8c:be:b8:14:97:ba:4d:f1:79:e4:fc:e8:9b:72:30:
19:b9:03:71:03:53:70:c8:86:76:e2:c6:f2:70:ef:11:3c:cd:
67:c0:93:db:c2:3b:3c:f2:dc:75:46:8d:31:43:51:ef:80:a3:
85:f7:cb:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:08:59 2025 by rpki-client